Encryption via Entangled states belonging to Mutually Unbiased Bases 
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We consider particular entanglement of two particles whose state vectors are in bases that are 
mutually unbiased (MUB), i.e. "that exhibit maximum degree of incompatibility" (J. Schwinger, Nat. 
Ac. Sci. (USA), 1960) ). We use this link between entanglement and MUB to outline a protocol 
for secure key distribution among the parties that share these entangled states. The analysis leads 
to an association of entangled states and states in an MUB set: both carry the same labels. 

PACS numbers: 03.65-w,03.67Dd,89.70.+c 



I. INTRODUCTION 



Two orthonormal vector bases, Bi, B2, are said to be 
mutually unbiased (MUB) iff 

V |ui), \u2)^Bi, B2 resp. \{ui\u2)\ — constant, (1.1) 

i.e. the absolute value of the scalar product of vectors 
from different bases is independent of the vectorial labels 
within cither basis. This implies that if the state vector 
is measured to be in one of the states e.g. |mi) of the 
base Bi, it is equally likely to be in any of the states 
1^2) of the base B2- The first to emphasize that there 
are more than two such bases "that exhibit maximum 
degree of incompatibility" i.e. more than just the pair 
of conjugate bases such as \x), (spatial coordinates) and 
|fc) (momentum representation basis) was Schwinger [l[. 
The infromation theoretic oriented term " mutually unbi- 
ased bases" (MUB) is due to Wootters [1]. Wootters and 
coworkers [3, H, 0] related the MUB's to lines in phase 
space: the vector/state that satisfy the equation. 



{p-bx)\l;b, c) 



ell; 6, c) 



-00 < c.b < 00, 



(1.2) 



This state may be viewed as lines in phase space in as 
much as the Wigner function of such state is given by (cf. 
Eq.dSl), Appendix A), 

M^|1;M(9,P) = 5{p-bq-c). (1.3) 

The index 1 among the state's labels, Eq. (|1.2p . denotes 
a one particle state (correspondingly 2 will denote two 
particle state). The label b specifics the basis while the 
label c gives the state within the basis. The above for- 
mula clearly accounts for viewing the states as lines in 
phase space: b specifies the orientation angle in phase 
space, while c - its intercept, e.g. for q — Q the line inter- 
cept the p axis at g = ^. The basis parametrized with 
||j ^ is taken to be (see |4j]) (a;|l; ±00, c) = 5{x — c), 
these are eigenstates of the position operator and form 
our computational basis. The state- vectors, for each ba- 
sis parametrized by b, form a complete orthonormal basis 
i: 



(l;&,c|l;6,c') = (5(c-c'), 
(ic|l;6;c)(l;6,c| = /. 



One may check directly that the vectors form an MUB 
set: 

I (1; 6, c|l; 6', c') I independent of c,c' forb^b'. 

The phase space geometry of MUB introduced by 
Wootters, may be seen as follows. Two lines (cf. 
Eq. (|1.3p ) parametrized with the same b but distinct c 
can never intersect. Two lines with distinct b's intersect 
once. 

Entanglement has been of great interest in theoretical 
physics since it first presentation by Einstein Podolsky 
and Rosen where they consider an entangled two par- 
ticles' state given by (the normalization is not specified) 



|2) 



EPR 



dxidx2S{xi — a;2)|a;i)|a;2) 



(1.5) 



(1.4) 



The ensuing studies led to the immense developement 
of quantum information theory 6, 7, 8] and, concommi- 
tantly, cryptography. On general grounds the sensitivity 
of quantum mechanical cryptographic protocols to eavs- 
droppers is anchored in a fundamental nature of quantum 
mechanics: a measuremant (e.g. by an eavesdropper) dis- 
turbs the system, i.e. leaves a trace (unless the state is 
an eigenstate of the operator representing the measure- 
ment). An essential ingredient is the use of non orthog- 
onal states, e.g. vectors from distinct MUB. Indeed this 
was the basis of the pioneering protocol of encodement 
|9]. 

A protocol wherein cryptographic security is based on 
entanglement was put forward by Ekert, [10|. Here, too, 
noncompatible (i.e. belonging to distict MUBs) bases are 
used. This idea involved qubits. It was extended with 
improved security to higher dimensional systems (qudits) 
11 , m, [l3| . The maximal number of MUB was shown 
14 1 to be d-l-1. Ivanovic, [lH| demonstrated that for d=p 
(a prime) the set (i.e. d-|-l bases) allows what is prob- 
ably most efficient means for the determining the den- 
sity matrix of an arbitrary state. This may be viewed 
as a facet in the study of d-dimcnsional quantum me- 
chanics. It attracted a large body of research work with 
several cogent reviews [3, 113, El, US]- These studies 
now involve abstract algebra and projective geometry: 
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0, [H, [ii, m [m, m m, [13, m . a central issue is the 
unsolved problem of the number of MUB for dimension- 
ality, d, which is not a power of a prime. Of particular in- 
terest for the present work are the articles by Planat and 
coworkers |22i, 2M '^ho studied entangled states in con- 
juction with MUB sets similar to ours (see also [l8Ll25l|). 

In the present work we consider an interrelation be- 
tween MUB and EPR like 0] entanglement. Our consid- 
erations are for continuous variables (i.e. d — s- oo) allow- 
ing us, thereby, to bypass some of the intricate problems 
that do arise in the finite dimensional case. In particualr 
we have Hermitian (i.e. measureable) operators that clas- 
sify the MUB. We consider in the next section the one 
particle observable, (p—bx), whose measurement projects 
on to Wootters' [2,141 "line in phase space" state. The 
projection is elaborated in appendix A. A two-particle 
state is built via an EPR 3 like entanglement. (The 
corresponding finite dimensional case is considered in ap- 
pendix B.) In the succeeding section we give a secure pro- 
tocol for (quantum) key distribution which, we believe, 
is conceptually simpler than available in the literature 
albeit is technically rather forbidding as it requires, for 
each transmitted bit two entangled states that are mea- 
sured (prepared) at the encyphering port, A (Alice's), 
and then one (of each) of the entangled pair is brought 
to B (Bob) while retaining coherence with its mate. The 
last section includes conclusions and remarks while the 
structure of the entangled states and their relation to 
MUB is given in appendix C. 

II. ENTANGLED MUTUALLY UNBIASED 
BASES 

The expression for the complete set of MUB for the 
continuous (d — + oo) case was given by Wootters We 
now recast it in our notations, the space location, x, is our 
"computational basis" (i.e. in terms of which we express 
all states): 

\l;b,c) = -j= / da;e*[^^'+^^l|a;). (2.1) 

(The normalization of (x|l; 6, c), given in [3|, was cho- 
sen to assure that J^^ dc\l; b, c)(l; b, c|, C2 > ci, is a pro- 
jection operator [1].) EPR like entanglement, Eq. (|1.5p . 
leads to the following state (a related entanglement was 
considered in (2^ . [2J) , 

V Stt J 

(2.2) 

a = 1, 2 as we require two entangled states. Thus we 
have for both states, 

{xi\{x2\2;b,c) = ^<5(.Ti-X2)e^[^-'+^-l. (2.3) 
V 27r 

This is the entangled state associated with the MUB la- 
beled by b. An essential ingredient of this expression is 



the additive attribute of the exponents, which in turn 
is a consequence of the states being of an MUB set (cf. 
Eq. p.ip and the analysis in the appendix B): 

gi[|x^+ca;] _ ^i[^x^ +cix] ^i[^x^ +C2x] 

For 6 = &i -|- 62, Ci + C2 — c. Now a measurement of 
the operator (pi — biXi) with the state |2; b, c), Eq. (|2.3p . 
yielding the value ci in the A port, projects the state of 
the second particle, at the B port, to |1; 62,02) (up to a 
trivial normalization constant). We outline the proof in 
appendix A. A finite dimensional version of this is given 
in appendix B. 

III. THE ENCRYPTION PROTOCOL 

We now give a protocol for a secure encryption. We 
consider an encrypted one bit message from A to B given 
that they share two entangled states (a = 1,2) cf. 
Eq. (|2.3p both having the same values for the parame- 
ters b and c. In this case, of common values of b and c, 
we assume that neither party requires the actual values 
of the parameters. ( For the cases where the entangled 
states differ in their eigenvalues, c, Alice has to use the 
difference of these values to affect the encryption.) The 
measurements relevant to this are the two particle ob- 
servables iZi,i?2, Eq.(l7|) discussed in Appendix C. The 
protocol is as follows: Alice measures for both states the 
quantity (pi—biXi). She may choose any bi but use it for 
both states. She records the two values she gets: ci and 
c'l- She now sends, by classical communication channel, 
a value A to Bob's port. Upon receiving Alice's message 
Bob subjects his second particle to the unitary transfor- 
mation e*"^^^ . This shifts his state from = c — c[ to 
C2-I-A (cf. Appendix A). Now he measures the correlation 
among his two states, 

|(1;62,C2|1;62,(4 + A))| = 5(c2 - 4 - A). (3.1) 

Thus if Alice chooses to communicate -1-1 she sends 
A = c[ — ci, if she chooses to communicate zero she 
sends X ^ c[ — ci. This proceedure is secure in as much 
as Alice and Bob can at any time check, via classical 
communication channels, whether the observed value is 
indeed the intended one: An eavesdropper must use the 
same MUB measurement (i.e. the same 61 chosen by A) 
and observe the same value ci in order not to leave a 
trace. In the case considered here both quantities range 
over unlimited numbers leaving him/her a small chance 
of avoiding detection. 



IV. CONCLUSIONS AND REMARKS 

Mutual unbiased bases may be characterized by ob- 
servables that are diagonal in each of them (hence cannot 
be so in any two distinct bases). Einstein, Podolsky 
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and Rosen (EPR) like entanglement of eigenfunctions of 
such observables has the property that measuring one 
particle of the entangled pair to be in a particular state 
(of the set of MUB bases' states) projects its (entangled) 
mate to another member state, generally in another 
basis. This attribute allowed us to outline a secure 
(albeit technically complicated) protocol for encryption. 
The analysis led to the consideration of what might be 
termed mutually unbiased entangled pairs bases. The 
basis vectors in two particles systems are (maximally) 
entangled pairs whose labels are those of the MUB states 
used in the entanglement. 

Appendix A: The Projection Proceedure 

We consider the Hermitian operator (p — bx) . We de- 
note its eigenfunctions by |1; 6, c): 



{p-bx)\l;b,c) = c\l;b,c). 



(1) 



We refer to the operator as the MUB operator (MUB-0). 
Its eignvalues for fixed b form a complete orthonormal ba- 
sis where the various vectors in a given basis are labeled 
by c. The definition of the MUB-0 implies that 3 , 



{x\l;b, c) 



(2) 



The normalization is obtained in The MUB related 
entanglement that we consider is given in Eq. (|2.2p . Mea- 
suring at the A port an arbitrary MUB-0, e.g. with a 
basis label bi and observing, say, ci, the projected state 
at the port B (before normalization) is: 



(l;6i,ci|2;6,c) = ^ / dxe^^^"'+^^" V) 
1 

|1;^2,C2), 



2tt 



(3) 



with b2 = b — bi] C2 = c — ci . Thus the second particle 
is projected into a sharply defined, MUB labeled, state. 

Appendix B: Entaglement of MUB states at Finite 
dimensionality 

Our method may be applied in the finite dimensional 
cpace to the case where the states' label are finite field 
variables. This is the case for dimensionality d, with 
d = p", p an odd prime [H [H, HI, HI] . The MUB are 
given by, using our notation, {ujp = e*~): 



neWd 



(4) 



Here b,c,n e ¥d, is Galois field of d dimension, \n) de- 
notes a vector in the computational basis (labelled with 



aP . The trace ,tr, is a mapping with a e F^; tra e Fp. 
Now a basic property of trace is: trjct + B] = tr[a] +tr[P] 
.Using our entanglement scheme [22l l23j. i.e. entangling 
within the computational basis, the entangled state cor- 
responding to the generic MUB state, Eq. (|4]), is. 



] ^tr[b2n'^ +C2n] 



n)|n),(5) 



with bi+b2 = b, C1+C2 = c. Thus projecting the first 
particle to any of the 61 , ci labeled state results in pro- 
jecting the second particle to |l;fo2,C2) state in analogy 
with Eq.®. 



(l;6i,ci||2;6,c) = --^1;62,C2). 



(6) 



No obvious measurement suggests itself for such 
projection. (Involvement of phase measurement by the 
Planat-Rosu phase operator [22| niay be expected.) 

Appendix C: Structure of the Entangled States 

The determination, at the A (Alice's) port, of the two 
particle eigenvalue of the entangled state associated with 
the single particle MUB labeled by b - i.e. the detrmina- 
tion of c of Eq. (|2.2p - requires operators whose measure- 
ment gives the eigenvalue while leaving the desired en- 
tangled state intact. The operators that characterize the 
(single particle) MUB arep—bx, Eq. (|2.2p . Here b signifies 
the basis. To form an entangled state we require two non- 
commuting operators for each of the two particles. These 
arepi — &ia;i, pi — b2Xi; 61 -I- 62 = b, 61 ^62, for the first 
particle and P2 — b[x2, P2 — ^2^2; b[ + bi^ = b, b[ ^ b'2, 
for the second. These operators allow the definition of 
two commuting two particles' operators, 

i?i = Pi - bixi +P2- 62^2; R2 = Pi- b'l^i +P2 - b'2X2. 

1) 



an element of the field); and tr[a\ 



■ a'' 



The common eigenfunctions of these are, necessarily [2£ 
entangled. The eigenfunctions of R2 are given by 
Eq. (|2.2p . the eigenvalue is c. Thus the required oper- 
ators are i?i,i?2. To gain some insight to these states 
we evaluate the Wigner function for the entangled state 
parametrized by b and c, 

M^|2;6x)(9l,92,Pl,P2) = 5{q2-qi)5{pi+p2~bqi+c). (8) 

Expressing thereby the relation of the entangled state to 
the MUB state bearing the same parameters. One of the 
authors(FCK)thanks NSERCC for financial suport.MR 
thanks the theoretical physics Institute for support dur- 
ing the stay at the University of Alberta. 



4 



[1] J. Schwinger, Proc. Nat. Acad. Sci. USA 46, 560 (1960). 

[2] W. K. Wootters, Ann. Phys.,(N.Y.) 176, 1 (1987). 

[3] W. Wootters and W. Fields, Ann. Phys.(N.Y.) [15] 

[4] K. S. Gibbons, M. J. Hoffman and W. K. Wootters, Phys. [16] 

Rev. A 70, 062101 (2004). [17] 
[5] A. Einstein, B. Podolsky and N. Rosen Phys. Rev 47, [18] 

777 (1935). 

[6] M. A. Nielsen and I. Chung, Quantum computation and [19] 
Quantum Information Cambridge University press, Cam- 
bridge (2000). [20] 
[7] L. Diosi, A Short Course in Quantum Information The- [21] 
ory - An Approach from Theoretical Physics. Vol. 713, [22] 
Springer Verlag (2007). 
[8] A. Peres, Quantum Theory: Concepts and Methods [23] 

(Kluwer, Dordrect, 1995). 
[9] C. H. Bennett and G. Brassard, in Proceedings of IEEE [24] 
International Conference on Computers, Systems and [25] 
Signal Processing, Bangalore, India (IEEE, New York, 
1984). [26] 

[10] A. Ekert, Phys. Rev. Lett. 67, 661 (1991). 

[11] T. Durt, D. Kaszlikowski, J-L Chen and L. C. Kwek, 
Phys. Rev A, 69, 032313 (2004). 

[12] H. Bechmann-Pasquinucci and A. Peres, Phys. Rev. Let. 
85, 3313 (2000). 

[13] N. Cerf, M. Bourennane, A. Karlsson and N. Gisin, Phys. 
Rev. Let. 88, 127902-1 (2002). 

[14] S. Bandyopadhyay, P. O. Boykin, V. Roychowdhury and 



F. Vatan, larXiv:qua nt-ph/0103162 v3 (2001), Algorith- 
mica 34, 512 (2002). 

I. D. Ivanovic, J. Phys. A, 14, 3241 (1981). 

A. Vourdas, Rep. Math. Phys. 40, 367 (1997). 

A. Vourdas, Rep. Prog. Phys. 67, 267 (2004) 

A. B. Klimov, L. L. Sanchez-Soto and H. de Guise, J. 

Phys. A: Math. Gen. 38, 2747 (2005^)^ 

M. Planat and M. Saniga, arXiv |quant-ph /0503I58V 2 

(2005) 

I. Bengtsson, arXiv:quantum-ph/0406174 (2004). 

W. K. Wootters, arXiv:quant-ph/0406032 ^^3, (2004) 

M. Planat and H. C. Rosu, Europ. Phys. J. 36, 133 

(2005). 

M. Planat, H. C. Rosu and S. Perrine, arXiv:quant- 
ph/040908v3, (2006). 

M. Combescure, arXiv:quant-ph/060509vl, (2006). 

A. B. Klimov, C. Munos and J. L. Romero, arXiv:quant- 

ph/060511vl (2005). 

We are unaware of any existing proof for this, rather ob- 
vious, observation. We may state the corresponding re- 
sult for the finite dimension as follows. Let two operators 
on system a be A, B, with AB = cBA, c 7^ 1. Let 
two operators on /3 be U, V, with UV=dVU. Let the 
product of the c numbers cd=l. We have now that AU 
commute with BV. The statement is that the common 
eigenfunction of AU and BV is necessarily entangled. 



